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2 July 1974 


MEMORANDUM FOR: Chief, Plans, Programs Branch 
SUBJECT : Annual Report Call for FY-1974 

Attached is the Information Systems Security 
Group submission for the Annual Report Call for 
Fiscal Year 1974. 


25X1 


Chief, Info^fiat ion System^ Security Group 


Attachment 


25X1 


Rcsrsdei! I’ncirssislstf v/iian separated 

from Classified Atiashmentls) ... . 
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Section A 


GENERAL 




1 ‘ . FY Z 7 J saw a reorganization of the Office of Semritv 
Securitv°tVonn ent T 1 restruct »ring of the Information Systems 7 

prog^cS^ 

SSS'-slaS 

action 2 Dla? e aS r « latl n n ° f oh l e «ives, the accompanying 
l£st?Sction’„n? J subsequent development of Letters of 
instruction got management involved in their nroner hndnncc 

S a glng people to get a properly defined joVS i^r ' 

i the transition from the planning staup tn i-he* 

goals'^ time;lv^fash * ISSG ani tially progressed toward its 
nK-; Q -f-* n tlI ? el y fashion. It became evident, however that the 

more t\V et r re tD S nui " er ° us (some 15 in Sr]l 

Tnn ° • th a n not were functions rather than objectives 

and’resignation^anra 50111161 turnover (resulting from transfers 
a resignations and a necessary reordering of Drioritipci 

impacted significantly on the ability of ?he Gr?Sp ?o meej its 

nf™I? d ob J ectl y es : This was particularly true in the areas 
f policy formulation and external support. 


Section B 


PERFORMANCE AGAINST FY 1974 OBJECTIVES 


i-Fa Pol * In i 11 ® a ? ea o£ P° lic y development the ISSG, through 
the Computer Security Subcommittee, SECOM, produced and sub- 

PoTicTpIpeToTtle^a 11 -^ P“ bllsh | d •» Int^lllgence Som^ity 
y Per on the sanitization of magnetic storage media 

Lo°7J nXOn ° b:, ® Ctive ’ ^e publication^* a Headjuf?te?s 
gulation on the same subject, was not completed. 

rp<;nnnHMr? eadqUart;erS Regulation on computer security 
responsibilities was completed in timely fashion Subseauent 
publication of the regulation has been delayed by lack of 
coordination within the Directorate of Operations. 
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3. Training and orientation objectives in tie field of 
computer security bave been accomplished through liaison with 
OJCS and the presentation of a seminar within ISSG. The 
seminar was postponed from February until June during a 
reordering of objectives in February 1974. 

4. A restructuring of the Agency’s handling of accountable 
25X1 classified matter fto i nclude the Top Secret Control Program and 

a revision of HR | | has been delayed due to lack of personnel 

resources. 

5. Completion of the report analyzing and evaluating the 
test of the OJCS 67/1 Interactive Computer System was completed 
28 June. This was originally scheduled for completion in the 
second quarter of FY-1974, 

6. The implementation of a security audit trail of the 
OJCS 67/1 Interactive System has been implemented and is 
functioning well. 

7. The test and evaluation of the software disconnect 
facility of the OJCS Interactive System, though delayed to await 
installation of equipment by OJCS, was completed and proved to 
be effective during nonbusiness hours. A companion check of 
all remote terminals to determine proper installation and main- 
tenance from a security viewpoint was completed. This check 

of the system will be repeated on a semi-annual basis. 

8. ^Security guidance and definition of requirements for 
thq OJCS maltf storage system were completed. Full support in 
thfe%*>- effort was delayed awaiting completion of a contractor 
effort. 

9. The analysis, test, and evaluation of the NPIC 
Computer System was planned during the fiscal year. The plan 
was implemented in April 1974 and is experiencing some delay 
in meeting of milestones. The test should be completed on 
schedule, 15 September 1974. 


Section C OTHER FY-1974 ACTIVITIES 


1. Coordination of Office of Security plans and 
activities in the field of ADP applications in Office operations 
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is a continuing activity of the ISSG not subsumed under a 
specific objective. In this regard, the unplanned priority 
dedication of a member of the Group to the Central Badge and 
Credential System (CENBAD) for a period of six weeks had a 
deleterious effect on the efforts directed to other Group 
obj ect ives . 


Section D RECOMMENDATIONS 


As a result of the problems encountered from the 
improper or imprecise definitions of objectives, the Office 
of Security has forwarded a request to the Deputy Director 
for Management and Services for permission to restate their 
objectives for FY-1975. It is recommended that objectives 
be subjected to a more detailed review in light of shifting 
priorities, altering of personnel resources available, and 
their continuing pertinence to the Office of Security mission. 
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